Turnstile Test Page

\n \n

\n \n \n\n`;\n\n // Return as plain text since OpenAPI will handle response formatting\n return html;\n}\n\nexport async function verifyTurnstile(ctx: BusinessLogicContext) {\n const { token } = ctx.body;\n const ip = getClientIP(ctx.request);\n\n // Use ValidationService for required field validation\n const missingFields = checkRequiredFields(ctx.body, [\"token\"]);\n if (missingFields.length > 0) {\n throw new Error(`Missing required fields: ${missingFields.join(\", \")}`);\n }\n\n // Use TurnstileService for complete validation with logging\n const result = await TurnstileService.verifyToken(\n token,\n ip,\n ctx.db,\n ctx.correlationId\n );\n\n return result;\n}\n\n\n\nclass TurnstileService {\n private static readonly TURNSTILE_VERIFY_URL = \"https://challenges.cloudflare.com/turnstile/v0/siteverify\";\n private static readonly CACHE_TTL = 90 * 1000; // 90 seconds as specified in SOLUTION.md\n\n /**\n * Validate Cloudflare Turnstile token with 90-second cache using database\n */\n static async validateToken(cfToken: string, clientIP?: string, db?: Database): Promise {\n if (!cfToken || typeof cfToken !== 'string') {\n return { valid: false, error: \"Missing or invalid Turnstile token\" };\n }\n\n // Check database cache first\n if (db) {\n const cached = await db.queryOne(\n `SELECT result, timestamp FROM turnstile_cache WHERE token = ? AND timestamp > ?`,\n [cfToken, Date.now() - this.CACHE_TTL]\n );\n \n if (cached) {\n const result = JSON.parse(cached.result) as TurnstileValidation;\n logger.info(\"Turnstile validation from database cache\", { \n token: cfToken.substring(0, 10) + \"...\",\n valid: result.valid \n });\n return result;\n }\n }\n\n // Get secret key from environment\n const secretKey = Deno.env.get(\"TURNSTILE_SECRET_KEY\");\n if (!secretKey) {\n logger.error(\"TURNSTILE_SECRET_KEY not configured\");\n return { valid: false, error: \"Turnstile validation not configured\" };\n }\n\n try {\n // Prepare verification payload\n const formData = new FormData();\n formData.append('secret', secretKey);\n formData.append('response', cfToken);\n if (clientIP) {\n formData.append('remoteip', clientIP);\n }\n\n // Call Cloudflare API\n const response = await fetch(this.TURNSTILE_VERIFY_URL, {\n method: 'POST',\n body: formData,\n });\n\n if (!response.ok) {\n logger.error(\"Turnstile API request failed\", { \n status: response.status,\n statusText: response.statusText \n });\n return { valid: false, error: \"Turnstile validation failed\" };\n }\n\n const result = await response.json();\n \n const validation: TurnstileValidation = {\n valid: result.success === true,\n error: result.success ? undefined : \"Turnstile challenge failed\",\n challenge_ts: result.challenge_ts,\n hostname: result.hostname\n };\n\n // Cache the result in database\n if (db) {\n await db.execute(\n `INSERT OR REPLACE INTO turnstile_cache (token, result, timestamp) VALUES (?, ?, ?)`,\n [cfToken, JSON.stringify(validation), Date.now()]\n );\n\n // Clean old cache entries periodically\n if (Math.random() < 0.1) { // 10% chance\n await db.execute(\n `DELETE FROM turnstile_cache WHERE timestamp <= ?`,\n [Date.now() - this.CACHE_TTL]\n );\n }\n }\n\n logger.info(\"Turnstile validation completed\", { \n token: cfToken.substring(0, 10) + \"...\",\n valid: validation.valid,\n hostname: validation.hostname,\n ip: clientIP \n });\n\n return validation;\n\n } catch (error) {\n logger.error(\"Turnstile validation error\", { \n error: error.message,\n token: cfToken.substring(0, 10) + \"...\"\n });\n return { valid: false, error: \"Turnstile validation failed\" };\n }\n }\n\n /**\n * Clean expired cache entries\n */\n\n /**\n * Clear all cached tokens (for testing/admin use)\n */\n static async clearCache(db?: Database): Promise {\n if (db) {\n await db.execute(`DELETE FROM turnstile_cache`);\n }\n logger.info(\"Turnstile cache cleared\");\n }\n\n /**\n * Complete Turnstile validation with security logging and correlation tracking\n */\n static async validateWithSecurityChecks(\n ctx: TurnstileValidationContext\n ): Promise {\n const { cfToken, ip, db, correlationId } = ctx;\n\n // 1. Format validation\n if (!ValidationService.isValidTurnstileTokenFormat(cfToken)) {\n if (correlationId) {\n logSecurityCheck(\n correlationId,\n \"Turnstile Validation\",\n \"Invalid Turnstile token format\",\n false,\n { cfToken: cfToken.substring(0, 20) + \"...\", ip }\n );\n }\n return { valid: false, error: \"Invalid Turnstile token format\" };\n }\n\n // 2. Service validation\n const turnstileValidation = await this.validateToken(cfToken, ip, db);\n\n // 3. Security logging\n if (correlationId) {\n if (!turnstileValidation.valid) {\n logSecurityCheck(\n correlationId,\n \"Turnstile Validation\",\n `Turnstile failed: ${turnstileValidation.error}`,\n false,\n { cfToken: cfToken.substring(0, 20) + \"...\", ip }\n );\n } else {\n logSecurityCheck(\n correlationId,\n \"Turnstile Validation\",\n \"Turnstile validation successful\",\n true,\n { ip, hostname: turnstileValidation.hostname }\n );\n }\n }\n\n return turnstileValidation;\n }\n\n /**\n * Validate Turnstile token for standalone verification endpoint\n */\n static async verifyToken(\n token: string,\n ip: string,\n db: Database,\n correlationId?: string\n ): Promise {\n // Format validation\n const tokenValidation = ValidationService.validateTurnstileToken(token);\n if (!tokenValidation.valid) {\n logger.warn(\"Turnstile token format validation failed\", {\n error: tokenValidation.error,\n token: token.substring(0, 20) + \"...\",\n ip,\n correlationId,\n });\n return { valid: false, error: `Invalid Turnstile token format: ${tokenValidation.error}` };\n }\n\n // Service validation\n const result = await this.validateToken(token, ip, db);\n\n // Audit logging\n logger.info(\"Turnstile verification completed\", {\n valid: result.valid,\n ip,\n token: token.substring(0, 20) + \"...\",\n hostname: result.hostname,\n correlationId,\n });\n\n return result;\n }\n\n /**\n * Check if Turnstile is properly configured\n */\n static isConfigured(): boolean {\n return !!Deno.env.get(\"TURNSTILE_SECRET_KEY\");\n }\n}\n\nexport { TurnstileService };","deleted","label",[171,172,153],"src","services","permalink","https://www.val.town/x/ianmenethil/ZenServer/code/src/services/turnstileService.ts","extension","actionData","errors"]